Initial commit of new security design, a rip off of XACML for now